topic Re: Port protection policy for local users and PCs in Endpoint

Port protection policy for local users and PCs

basil_hol — Tue, 07 Nov 2023 14:26:20 GMT

Hello dear colleagues

I have double quetsion about port protection policies in SmartEndpoint R81.10:

1) Is it possible to block usb-ports for local users on PCs that are in windows domain?

2) Is it possible to use device control (storages, printers etc) on specified PCs without binding to users?

Thank you

Re: Port protection policy for local users and PCs

PhoneBoy — Tue, 07 Nov 2023 20:13:11 GMT

I believe you can do machine and user-specific policies for both of these items.

Re: Port protection policy for local users and PCs

basil_hol — Wed, 08 Nov 2023 13:58:19 GMT

Thank you for believing, but I need some help
at least some specific SK (I didn't find) or section in Admin Guide

Re: Port protection policy for local users and PCs

Chris_Atkinson — Wed, 08 Nov 2023 16:11:41 GMT

This should help to start:

https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Harmony-Endpoint-Admin-Guide/Topics-HEP/Policy-Operation.htm

Re: Port protection policy for local users and PCs

basil_hol — Thu, 09 Nov 2023 16:01:10 GMT

Thank you, that's great
But our network doesn't have any accsess to clouds. So the only thing I can use is SmartConsole (R81.10) and SmartEndpoint Manager. In this case, as I understand, Media Encryption&Port protection policy can be applicable to domain users, not PCs/local users

Re: Port protection policy for local users and PCs

Chris_Atkinson — Thu, 09 Nov 2023 22:23:42 GMT

Note the Web Management was introduced starting R81 for non-cloud managed environments.

https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_HarmonyEndpointWebManagement_AdminGuide/Topics-HEPWM-R81.10/Policy_Operation.htm?Highlight=Mixed

Re: Port protection policy for local users and PCs

basil_hol — Mon, 13 Nov 2023 07:16:49 GMT

Thanks everyone

My company has license that doesn't allow configuring MEPP for PCs.

Topic can be closed